Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-25727HistoryFeb 13, 2023 - 6:15 a.m.
CVE-2023-25727
2023-02-1306:15:11
Debian Security Bug Tracker
security-tracker.debian.org
27
phpmyadmin
xss
file upload
drag-and-drop
authenticated user
security vulnerability
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
23.5%
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | phpmyadmin | < 4:5.2.1+dfsg-1 | phpmyadmin_4:5.2.1+dfsg-1_all.deb |
| Debian | 11 | all | phpmyadmin | <= 4:5.0.4+dfsg2-2+deb11u1 | phpmyadmin_4:5.0.4+dfsg2-2+deb11u1_all.deb |
| Debian | 999 | all | phpmyadmin | < 4:5.2.1+dfsg-1 | phpmyadmin_4:5.2.1+dfsg-1_all.deb |
| Debian | 13 | all | phpmyadmin | < 4:5.2.1+dfsg-1 | phpmyadmin_4:5.2.1+dfsg-1_all.deb |
Related
osv
osv
Cross-site Scripting vulnerability in drag-and-drop upload of phpMyAdmin
2023-02-13 06:30:59
CVE-2023-25727
2023-02-13 06:15:11
BIT-phpmyadmin-2023-25727
2024-03-06 11:01:27
cvelist
cvelist
CVE-2023-25727
2023-02-13 00:00:00
phpmyadmin
phpmyadmin
XSS vulnerability in drag-and-drop upload
2023-02-07 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2023-02-22 07:42:04
redos
redos
ROS-20240902-19
2024-09-02 00:00:00
ubuntucve
ubuntucve
CVE-2023-25727
2023-02-13 00:00:00
nvd
nvd
CVE-2023-25727
2023-02-13 06:15:11
github
github
Cross-site Scripting vulnerability in drag-and-drop upload of phpMyAdmin
2023-02-13 06:30:59
prion
prion
Information disclosure
2023-02-13 06:15:00
openvas
openvas
phpMyAdmin 4.3.x < 4.9.11, 5.2.x < 5.2.1 XSS Vulnerability - Windows
2023-02-08 00:00:00
phpMyAdmin 4.3.x < 4.9.11, 5.2.x < 5.2.1 XSS Vulnerability - Linux
2023-02-08 00:00:00
openSUSE: Security Advisory for phpMyAdmin (openSUSE-SU-2023:0047-1)
2024-03-04 00:00:00
cve
cve
CVE-2023-25727
2023-02-13 06:15:11
nessus
nessus
openSUSE 15 Security Update : phpMyAdmin (openSUSE-SU-2023:0047-1)
2023-02-16 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
23.5%
Related for DEBIANCVE:CVE-2023-25727